Community discussions

Search found 321 matches

  • 1
  • 3
  • 4
  • 5
  • 6
  • 7
by xvo
Mon Aug 27, 2018 12:27 am
Forum: Beginner Basics
Topic: Mikrotik VLANs (Office, Guest, Managment)
Replies: 10
Views: 1223

Re: Mikrotik VLANs (Office, Guest, Managment)

Read trough this thread: https://forum.mikrotik.com/viewtopic.php?f=2&t=138232 it show how to setup bridge and vlan for the 750Gr3 with ROS >=6.41 See at the bottom in the thread. You need to att the bridgin, bridge/ports and interface/vlan To Jotne: No offence. It is really great that you are tryi...
by xvo
Sun Aug 26, 2018 7:22 pm
Forum: Beginner Basics
Topic: Mikrotik VLANs (Office, Guest, Managment)
Replies: 10
Views: 1223

Re: Mikrotik VLANs (Office, Guest, Managment)

It seems that you've already done all L2 configuration.
The rest is just firewall rules to allow/drop the traffic between the vlan interfaces.
by xvo
Sun Aug 26, 2018 3:17 pm
Forum: RouterBOARD hardware
Topic: RB1100AHx4 power requirements
Replies: 1
Views: 333

Re: RB1100AHx4 power requirements

20-57 is for POE input.
by xvo
Sun Aug 26, 2018 12:51 pm
Forum: RouterBOARD hardware
Topic: wsAP ac lite power clarification
Replies: 1
Views: 289

Re: wsAP ac lite power clarification

wsAP ac lite can be powered with passive poe. However, there is a recend thread on the forum, about hEX S having some poe output problems to hAP ac2: https://forum.mikrotik.com/viewtopic.php?f=2&t=138036 Power consumption for wsAP ac lite is lower than for hAP ac2 (10W and 15W respectively), and on ...
by xvo
Sun Aug 26, 2018 9:50 am
Forum: Beginner Basics
Topic: wAP ac as bridge mode [SOLVED]
Replies: 14
Views: 1943

Re: wAP ac as bridge mode [SOLVED]

Looks ok!
You are welcome :)
by xvo
Sat Aug 25, 2018 4:30 pm
Forum: Beginner Basics
Topic: Bridge VLAN filtering
Replies: 18
Views: 1208

Re: Bridge VLAN filtering

@xvo: Unfortunately, the client 2 client forwarding as well as local forwarding is not the solution: still no connection within VLAN3 via wifi. :-)

@jotne: Thanks for the link - I will go reading now!
It should be something on the devices themselves then, just like it was with NAS2 :)
by xvo
Sat Aug 25, 2018 3:42 pm
Forum: Beginner Basics
Topic: Bridge VLAN filtering
Replies: 18
Views: 1208

Re: Bridge VLAN filtering

Fine thanks - I still have a lot to learn about VLANs :) Now the 2 NAS are fine in VLAN2 living on physical ports and I have to find out why 2 devices in VLAN3 cannot talk to each other (both connected via CAP1-iot) before I can move on with stage 2 (getting another VLAN switch running on the trunk...
by xvo
Sat Aug 25, 2018 3:38 pm
Forum: Announcements
Topic: v6.42.7 [current] is released!
Replies: 159
Views: 29264

Re: v6.42.7 [current] is released!

Yes, I tried it as first. But after restart is still Wireless package on it :(
Looks like netinstall is the only solution:
viewtopic.php?f=1&t=133352&p=655190
by xvo
Sat Aug 25, 2018 3:01 pm
Forum: Beginner Basics
Topic: Bridge VLAN filtering
Replies: 18
Views: 1208

Re: Bridge VLAN filtering

You have your VLAN interfaces created on top of the bridge added to the same bridge as bridge ports. That's not right. Remove all VLAN interfaces from bridge ports. And then add the bridge itself as a tagged member of each VLAN that have a corresponding VLAN interface. I guess i mixed up old and ne...
by xvo
Sat Aug 25, 2018 2:57 pm
Forum: Announcements
Topic: v6.42.7 [current] is released!
Replies: 159
Views: 29264

Re: v6.42.7 [current] is released!

Hello, I have a big problem for me. I wanted to update RouterOS to v 6.42.7 but without success. Now I have disable Wireless module and my AP's are broken because my CAPsMAN is off. If I want to enable a Wireless module nothing will hapend after restart :( Can you help me? Thank's Update.png That's...
by xvo
Sat Aug 25, 2018 2:48 pm
Forum: Beginner Basics
Topic: wAP ac as bridge mode [SOLVED]
Replies: 14
Views: 1943

Re: wAP ac as bridge mode [SOLVED]

Almost everything is done right. The only things. 1) Go to "Bridge", tab "Bridge" - here you can delete the bridge named "bridge" as you don't use it anymore, leave only bridge1. 2) Then "Bridge", tab "Port" - delete LAN, leave wlan1, wlan2 and ether1. 3) And the last, go to "Interfaces", tab "Inter...
by xvo
Sat Aug 25, 2018 2:29 pm
Forum: Beginner Basics
Topic: Routing and redirect from same network
Replies: 18
Views: 791

Re: Routing and redirect from same network

I didn't spot any potential problems. Especially if you allow everything in firewall during the tests. I can suggest you to take any other mikrotik router and try to simulate the situation. First placing in instead of LinkSys, with your first mikrotik in place, and configured as it is now. And secon...
by xvo
Sat Aug 25, 2018 1:44 pm
Forum: Beginner Basics
Topic: Bridge VLAN filtering
Replies: 18
Views: 1208

Re: Bridge VLAN filtering

Found another thing in your config, that you will need to add, after removing VLAN interfaces from being the bridge ports. In your interface lists you have only bridge added as a member of LAN. This works for all interfaces, that are ports of the bridge. But not the interfaces, that are created on t...
by xvo
Sat Aug 25, 2018 1:14 pm
Forum: Beginner Basics
Topic: GPON Terminal + HAP AC^2
Replies: 2
Views: 318

Re: GPON Terminal + HAP AC^2

Test your line between the wall plugs.
by xvo
Sat Aug 25, 2018 1:04 pm
Forum: Beginner Basics
Topic: Bridge VLAN filtering
Replies: 18
Views: 1208

Re: Bridge VLAN filtering

You have your VLAN interfaces created on top of the bridge added to the same bridge as bridge ports.
That's not right.
Remove all VLAN interfaces from bridge ports.
And then add the bridge itself as a tagged member of each VLAN that have a corresponding VLAN interface.
by xvo
Sat Aug 25, 2018 11:53 am
Forum: Beginner Basics
Topic: wAP ac as bridge mode [SOLVED]
Replies: 14
Views: 1943

Re: wAP ac as bridge mode [SOLVED]

Try changing "Channel width" for 5Ghz back to "20/40/80mhz-Ceee". Can be, that your devices don't like the XXXX setting. Apart from that I see many parts from previous config, that are still present, but not needed anymore. They are not actually active, but It's better to delete or modify them. Inte...
by xvo
Fri Aug 24, 2018 6:29 pm
Forum: Beginner Basics
Topic: Routing and redirect from same network
Replies: 18
Views: 791

Re: Routing and redirect from same network

How does the route to 192.168.2.0/24 on mikrotik look like? /ip> route print Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 A S 0.0.0.0/0 91.xxx.xxx.xx...
by xvo
Fri Aug 24, 2018 6:07 pm
Forum: Beginner Basics
Topic: RB951g-2HnD setting internal DNS only. [SOLVED]
Replies: 4
Views: 481

Re: RB951g-2HnD setting internal DNS only. [SOLVED]

Do you have "Allow remote requests" checked in your DNS settings?
by xvo
Fri Aug 24, 2018 3:29 pm
Forum: Beginner Basics
Topic: Routing and redirect from same network
Replies: 18
Views: 791

Re: Routing and redirect from same network

How does the route to 192.168.2.0/24 on mikrotik look like?
by xvo
Fri Aug 24, 2018 12:42 pm
Forum: Beginner Basics
Topic: Routing and redirect from same network
Replies: 18
Views: 791

Re: Routing and redirect from same network

In your Linksys config for the route I see, that you choose "3 (DMZ)".
Is it possible, that Linksys applies some different firewall behaviour to this route because of that?
For example opening/closing ports automatically?
Are DMZ settings configured anywhere else?
by xvo
Fri Aug 24, 2018 2:39 am
Forum: RouterBOARD hardware
Topic: Stable RB951G or a new hAP ac2
Replies: 16
Views: 2861

Re: Stable RB951G or a new hAP ac2

Kind of proud for my wAP ac, as it outperforms the newer and much more powerful hAP ac2 even when utilising 2 of 3 chains. I got stable 200/230 TX/RX with 10 UDP streams, 190/230 with single UDP and 160/200 with TCP. When testing from iphone I've even seen something like 260-270RX on peaks, but it w...
by xvo
Fri Aug 24, 2018 1:58 am
Forum: General
Topic: dynamic address list from firewall rule
Replies: 2
Views: 301

Re: dynamic address list from firewall rule

Everything seems fine in your config line.
What do you mean by "creates a new address list every time it creates an entry" - each entry have different name?
by xvo
Fri Aug 24, 2018 1:22 am
Forum: Wireless Networking
Topic: Can I run separate Hotspot servers per VLAN?
Replies: 8
Views: 800

Re: Can I run separate Hotspot servers per VLAN?

Also models with QCA8337, Atheros8327, Atheros8316 switch chips seem to be able to use the same method as for CRS3xx, but their rule tables are smaller.
by xvo
Thu Aug 23, 2018 10:24 pm
Forum: General
Topic: DMZ Routing question (Stuck)
Replies: 17
Views: 865

Re: DMZ Routing question (Stuck)

...one post to find what the problem is... ...one post to suggest a solution... ...ten posts to convince, that it is the only solution... ...sigh... Nevermind, just grumbling :) Thanks, but as i'm sure you know with any IT problem there is no "one solution" so whilst everyone including yourself abo...
by xvo
Thu Aug 23, 2018 8:43 pm
Forum: Wireless Networking
Topic: Public WiFi making money with ads
Replies: 3
Views: 661

Re: Public WiFi making money with ads

You'd make more money faster just charging for internet access over it.
Nice one! :lol:
by xvo
Thu Aug 23, 2018 8:33 pm
Forum: Beginner Basics
Topic: wAP ac as bridge mode [SOLVED]
Replies: 14
Views: 1943

Re: wAP ac as bridge mode [SOLVED]

After that just make another export and I'll help you to add 2.4Ghz radio.
by xvo
Thu Aug 23, 2018 8:28 pm
Forum: Beginner Basics
Topic: wAP ac as bridge mode [SOLVED]
Replies: 14
Views: 1943

Re: wAP ac as bridge mode [SOLVED]

Little correction: it's better to set to Channel Width to "20/40/80Mhz XXXX", as you are using "auto" channel.
by xvo
Thu Aug 23, 2018 8:21 pm
Forum: Beginner Basics
Topic: wAP ac as bridge mode [SOLVED]
Replies: 14
Views: 1943

Re: wAP ac as bridge mode [SOLVED]

The best (but maybe not the easiest) way is to remove all config and write it from scratch. If you want to stick to QuickSet... Well, you can't do it all with QuickSet only, but the closest you can get is WISP AP mode. screen1.jpg The only thing you will need to add manually - are settings for the s...
by xvo
Thu Aug 23, 2018 7:34 pm
Forum: General
Topic: DMZ Routing question (Stuck)
Replies: 17
Views: 865

Re: DMZ Routing question (Stuck)

...one post to find what the problem is...
...one post to suggest a solution...
...ten posts to convince, that it is the only solution...
...sigh...

Nevermind, just grumbling :)
by xvo
Thu Aug 23, 2018 1:03 pm
Forum: Beginner Basics
Topic: Error:could not connect to 192.168.15.1
Replies: 4
Views: 8182

Re: Error:could not connect to 192.168.15.1

Check if the winbox access is allowed for you in /ip services.
Check your firewall for winbox port to be open for you.
by xvo
Thu Aug 23, 2018 12:37 pm
Forum: General
Topic: Firewall: accept established/related... in forward chain?
Replies: 6
Views: 1553

Re: Firewall: accept established/related... in forward chain?

It's the first rule to be set - so that 99% of you traffic won't wander through your firewall.
by xvo
Thu Aug 23, 2018 12:19 pm
Forum: Beginner Basics
Topic: wAP ac as bridge mode [SOLVED]
Replies: 14
Views: 1943

Re: wAP ac as bridge mode [SOLVED]

So what's the question?
Just configure wAP as a bridge and everything in you local network will get addresses from CCR.
by xvo
Thu Aug 23, 2018 12:12 pm
Forum: General
Topic: routerOS vs SwitchOS
Replies: 7
Views: 1032

Re: routerOS vs SwitchOS

I think you can buy the switch without any doubts: if it's router power won't be sufficient, you can always buy something like RB750Gr3 later for purely routing purposes.
Considering the prices for both devices... Well, you can buy RB750Gr3 on the change from buying the switch :)
by xvo
Thu Aug 23, 2018 1:00 am
Forum: Scripting
Topic: script for buttom mikrotik
Replies: 3
Views: 424

Re: script for buttom mikrotik

Just put the name of your interface:
if ([/interface get [find name=NAME] disabled] = no) do={ [/interface set [find name=NAME] disabled=yes] } else={[/interface set [find name=NAME] disabled=no] }
by xvo
Wed Aug 22, 2018 9:56 pm
Forum: General
Topic: routerOS vs SwitchOS
Replies: 7
Views: 1032

Re: routerOS vs SwitchOS

Based on what you described, you need to run RouterOS, as SwOS is only for L2 functions.

And once again, being a rather powerful switch, however it will be a rather weak router - for example don't expect gigabit speeds when routing between different VLANs.
by xvo
Wed Aug 22, 2018 9:37 pm
Forum: General
Topic: [SOLVED] IPv6 pings work, webpage won't load
Replies: 39
Views: 1955

Re: IPv6 works on router, not on clients

Try adding some static ipv6 dns servers to /ip dns (for example the ones from google: 2001:4860:4860::8888 and 2001:4860:4860::8844) and check "Advertise DNS"
by xvo
Wed Aug 22, 2018 7:58 pm
Forum: General
Topic: [SOLVED] IPv6 pings work, webpage won't load
Replies: 39
Views: 1955

Re: IPv6 works on router, not on clients

Just to clarify: do clients get the addresses but still they have no connectivity, or they don't get any addresses at all?
by xvo
Wed Aug 22, 2018 6:20 pm
Forum: General
Topic: routerOS vs SwitchOS
Replies: 7
Views: 1032

Re: routerOS vs SwitchOS

Much more switch, than router.
However all (or most) of the switch functionality is available in ROS as well, only the configuration methods are different.
by xvo
Wed Aug 22, 2018 5:52 pm
Forum: General
Topic: [SOLVED] IPv6 pings work, webpage won't load
Replies: 39
Views: 1955

Re: IPv6 works on router, not on clients

Other than "Accept Router Advertisements" need to be set to "no" or to "yes, if forwarding disabled" everything else looks fine.
by xvo
Wed Aug 22, 2018 5:16 pm
Forum: Beginner Basics
Topic: Routing and redirect from same network
Replies: 18
Views: 791

Re: Routing and redirect from same network

How does 192.168.2.111 get it's address: from DHCP on 192.168.2.110 or you assign it manually?
by xvo
Wed Aug 22, 2018 5:11 pm
Forum: Beginner Basics
Topic: Routing and redirect from same network
Replies: 18
Views: 791

Re: Routing and redirect from same network

Will it help if you connect mikrotik directly to linksys, not via the switch? No. still same symptoms So, once again: 1) you create a route on linksys 2) it doesn't work - devices on 192.168.2.0/24 can't reach devices in 10.64.128.0/22. 3a) you ping 192.168.2.110 from 192.168.2.111: the route start...
by xvo
Wed Aug 22, 2018 4:25 pm
Forum: General
Topic: Block traffic same subnet VLAN
Replies: 35
Views: 1832

Re: Block traffic same subnet VLAN

Thanks xvo. ( "All work correctly") :) I mean that I do not want to change all the configuration of the network because everything currently works correctly. I also set several firewall rules (via mikrotik) I only have the problem that the devices connected to the cisco switch do not pass through t...
by xvo
Wed Aug 22, 2018 4:04 pm
Forum: Beginner Basics
Topic: Routing and redirect from same network
Replies: 18
Views: 791

Re: Routing and redirect from same network

Will it help if you connect mikrotik directly to linksys, not via the switch?
by xvo
Wed Aug 22, 2018 3:48 pm
Forum: General
Topic: Block traffic same subnet VLAN
Replies: 35
Views: 1832

Re: Block traffic same subnet VLAN

@xvo Sorry ,your solution seems too complex and not easy to manage.At the moment all works correctly @cdiedrich you've figured out you're that problem! Access points via bridges always enter the mikrotik "forward chain" and can safely manage traffic through the integrated firewall. ACL ( in cisco s...
by xvo
Wed Aug 22, 2018 2:35 pm
Forum: General
Topic: Block traffic same subnet VLAN
Replies: 35
Views: 1832

Re: Block traffic same subnet VLAN

I still don't understand completely what is it your are trying to achieve, but the solution lies in configuring port isolation on your switch. If you want to see ALL traffic on mikrotik to make the decision whether to forward it or drop it, you have to make all ports on the switch isolated(protected...
by xvo
Wed Aug 22, 2018 12:26 pm
Forum: Wireless Networking
Topic: Older Laptops Not Detecting SSID on SXT5nDr2
Replies: 7
Views: 518

Re: Older Laptops Not Detecting SSID on SXT5nDr2

Do this old laptops have dual band wifi 2.4/5GHz or just 2.4GHz?
by xvo
Wed Aug 22, 2018 2:00 am
Forum: Beginner Basics
Topic: Disable PoE
Replies: 5
Views: 1928

Re: Disable PoE

HEX PoE lite (RB750UPr2) has passible PoE. As I understand that means it does not check if the device uses PoE, so it's always on. I got it wrong? It's not like that. While it doesn't perform power negotiation, in terms of af/at standard (with device classification, etc.), it still checks the resis...
by xvo
Wed Aug 22, 2018 1:32 am
Forum: General
Topic: Limit-at and Max-limit
Replies: 3
Views: 379

Re: Limit-at and Max-limit

I would add a little more overhead, especially for limit-at (you are not really cutting anything): Parent max-limit 5M children1 limit-at 2M max-limit 4.5M children2 limit-at 2M max-limit 4.5M You can try different values trying to minimise the number of packets dropped. BTW, you can set different p...
  • 1
  • 3
  • 4
  • 5
  • 6
  • 7